$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa File: 6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa (raw, json) Hash identifier: 1LwxHMUBx4EO4TElnWm5S+wwtRBenzJc/DaKLs8qFGU= Subject key identifier: 31:D9:59:2E:2F:F6:17:67:4D:6B:F0:13:B6:FC:B1:83:91:B4:26:CC Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Certificate serial: 010D0C9F432858498749837AB11CE87A0448D480 Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa Signing time: Mon 14 Apr 2025 23:56:04 +0000 ROA not before: Mon 14 Apr 2025 23:56:04 +0000 ROA not after: Sun 13 Jul 2025 23:56:04 +0000 asID: 398741 IP address blocks: 204.235.240.0/24 maxlen: 24 204.235.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:49:83:7a:b1:1c:e8:7a:04:48:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Validity Not Before: Apr 14 23:56:04 2025 GMT Not After : Jul 13 23:56:04 2025 GMT Subject: CN=51d7e9a2-559c-45c5-a4b0-9326e810efbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:54:a8:0d:9c:d2:51:38:b3:eb:19:8a:02: 25:06:b0:30:a8:71:ef:ba:d0:bd:e7:f6:f9:8d:09: cf:bd:54:70:d5:22:0c:60:b7:e5:8c:b7:56:7c:b4: f7:28:a4:c4:3d:08:63:ab:a5:95:1d:64:b0:90:1f: b8:74:e2:17:f2:bc:2f:3c:db:dc:13:9f:eb:03:f1: cb:8c:4d:85:d5:9c:95:bb:03:c3:0e:6f:90:04:32: 11:b4:6b:83:17:d9:87:e1:d3:2d:ec:8a:96:ab:77: cf:aa:fc:4f:97:79:a4:48:ec:0f:f1:f7:81:4e:a9: 2b:0e:c9:f5:9c:2d:21:3e:40:38:37:38:a9:6a:85: c0:ba:b6:52:24:75:48:65:1f:12:86:c1:ca:bd:8d: 6c:15:d9:f1:eb:6f:a8:a7:f4:5a:dc:36:96:4a:e5: 03:6c:1b:2d:bf:4e:3c:35:1a:eb:5e:72:a3:7f:fe: 0a:b7:3a:5f:53:e1:47:9e:12:4f:dc:89:5b:f7:7c: 9c:5b:c0:bc:f4:45:8a:93:81:60:1b:e1:79:af:c4: 77:26:be:03:5b:33:5b:51:3e:2f:ae:fa:7a:8a:d2: bb:bc:cf:4d:7d:c0:0a:7a:af:e2:1f:9a:73:5e:1d: 8a:86:36:72:a7:3c:f6:f4:19:80:47:35:55:ee:4a: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:59:2E:2F:F6:17:67:4D:6B:F0:13:B6:FC:B1:83:91:B4:26:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl X509v3 Authority Key Identifier: keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer sbgp-ipAddrBlock: critical IPv4: 204.235.240.0/24 204.235.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4a:81:df:45:a2:29:31:f9:b2:a7:9b:fd:75:d1:48:ba:af: 51:85:01:68:a4:59:9b:0f:51:8e:b0:65:76:90:f8:6b:19:11: c3:8f:e2:55:ad:20:6d:e2:1e:87:b6:c6:b5:bf:24:42:d6:28: 6a:b7:1c:81:d4:6d:fd:90:35:8d:9e:34:ef:56:c4:f2:32:4e: 4f:44:5a:d5:41:50:6d:c4:b8:bc:ff:7a:c5:ee:61:68:93:7c: 6e:25:b4:fe:f8:65:70:40:7e:f6:cb:0d:a7:78:be:5d:37:45: af:42:58:4d:ba:bd:39:58:49:c6:b3:13:99:24:cf:98:88:64: 22:62:a5:0b:71:44:6f:14:aa:ce:b2:85:bc:ae:f4:2e:eb:64: 2a:ae:d2:ae:6f:3f:e7:7c:d1:20:7a:46:4c:7b:50:2d:9a:93: 96:b8:2f:cf:fc:2c:f5:6a:ab:01:6a:99:67:26:2b:2d:a3:ce: c7:6c:c9:e7:9f:d9:71:7c:20:68:3f:07:ef:f3:83:3a:69:d5: 45:5c:1e:c4:9f:52:de:69:7f:01:d9:67:5b:be:3a:28:55:fc: 34:69:d2:9c:de:86:66:ab:b1:a5:43:2d:4e:c7:94:26:2e:68: 07:99:d2:4f:c3:e4:2f:57:4f:0e:86:11:98:88:c7:1d:40:98: fe:5a:63:cb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmHSYN6sRzoegRI1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyZjVhNGMtOTE3ZS00YjkwLTgwMjItMzkxODQ3YWU1 Njk5MB4XDTI1MDQxNDIzNTYwNFoXDTI1MDcxMzIzNTYwNFowLzEtMCsGA1UEAxMk NTFkN2U5YTItNTU5Yy00NWM1LWE0YjAtOTMyNmU4MTBlZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWdUqA2c0lE4s+sZigIlBrAwqHHvutC95/b5 jQnPvVRw1SIMYLfljLdWfLT3KKTEPQhjq6WVHWSwkB+4dOIX8rwvPNvcE5/rA/HL jE2F1ZyVuwPDDm+QBDIRtGuDF9mH4dMt7IqWq3fPqvxPl3mkSOwP8feBTqkrDsn1 nC0hPkA4NzipaoXAurZSJHVIZR8ShsHKvY1sFdnx62+op/Ra3DaWSuUDbBstv048 NRrrXnKjf/4KtzpfU+FHnhJP3Ilb93ycW8C89EWKk4FgG+F5r8R3Jr4DWzNbUT4v rvp6itK7vM9NfcAKeq/iH5pzXh2KhjZypzz29BmARzVV7kpjhQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDHZWS4v9hdnTWvwE7b8sYORtCbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYzJm NWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4NDdhZTU2OTkvNmVjMmM3NWItMWQwYS0z ZWEzLTllNmMtNjAzM2JlNGEwM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGMyZjVhNGMtOTE3ZS00YjkwLTgw MjItMzkxODQ3YWU1Njk5LzBjMmY1YTRjLTkxN2UtNGI5MC04MDIyLTM5MTg0N2Fl NTY5OS5jcmwwHwYDVR0jBBgwFoAUKnfTBPDpKIyedYcM4/xf3RQLd6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYzJmNWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4 NDdhZTU2OTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzOvwAwQA zOvyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGZKgd9Foikx+bKnm/110Ui6r1GFAWikWZsPUY6wZXaQ+GsZ EcOP4lWtIG3iHoe2xrW/JELWKGq3HIHUbf2QNY2eNO9WxPIyTk9EWtVBUG3EuLz/ esXuYWiTfG4ltP74ZXBAfvbLDad4vl03Ra9CWE26vTlYScazE5kkz5iIZCJipQtx RG8Uqs6yhbyu9C7rZCqu0q5vP+d80SB6Rkx7UC2ak5a4L8/8LPVqqwFqmWcmKy2j zsdsyeef2XF8IGg/B+/zgzpp1UVcHsSfUt5pfwHZZ1u+OihV/DRp0pzehmarsaVD LU7HlCYuaAeZ0k/D5C9XTw6GEZiIxx1AmP5aY8s= -----END CERTIFICATE-----Generated at Sun Apr 20 02:19:17 2025 by rpki-client